CompTIA Security+ (SY0-701)Threats, Vulnerabilities, and MitigationsEasy
A security analyst is briefing management on a recent breach in which attackers spent months quietly exfiltrating intellectual property from a defense contractor without triggering alerts. Which threat actor motivation is MOST consistent with this activity?
- AEspionage on behalf of a nation-state
- BIdeological hacktivism
- CPersonal notoriety among peers
- DFinancial gain through ransomware
Show answer & explanationAnswer & explanation
Correct answer: A. Espionage on behalf of a nation-state
Long-term, stealthy exfiltration of intellectual property from a defense contractor is a hallmark of nation-state espionage, which prioritizes sustained covert access over quick disruption or financial extortion.
Why the other options are wrong
- B. Hacktivists usually seek public attention, not quiet long-term theft.
- C. Notoriety seekers want recognition, which conflicts with staying hidden.
- D. Ransomware actors seek fast payouts and are typically loud, not stealthy.
Nation-State Threat Actor
A government-sponsored group conducting cyber operations for espionage, sabotage, or strategic advantage.
- Highly resourced and patient
- Often targets government, defense, and critical infrastructure
- Goal is typically long-term access, not quick disruption
Memory trick: Spies stay Silent and Slow for Secrets.